REMARKS 

The present application was filed on February 19, 2004, with claims 1-33, and claims 
priority to U.S. provisional application Serial No. 60/468,200, filed May 6, 2003. Claims 1-33 
are currently pending in the application. Claims 1 and 30-33 are the independent claims. 

Reconsideration of the present application is respectfully requested in view of the 
following remarks. 

Applicant submitted a Supplemental Information Disclosure Statement (IDS) with Form 
PTO-1449 on August 18, 2004. The USPTO acknowledged receipt of the Supplemental IDS. 
However, the Examiner has failed to retum an initialed copy of the PTO-1449 from the 
Supplemental IDS. Accordingly, a copy is attached hereto, along with a copy of the retum 
postcard indicating receipt in the USPTO. The Examiner is requested to consider the cited 
reference and retum an initialed copy of the PTO-1449. 

The Examiner has objected to the drawings on the grounds that the "verifier which is 
other than the reader" as recited in claim 3 is not shown in the drawings. Applicant respectfully 
traverses the objection. An example of a verifier other than the reader is one of the servers 108, 
110 as explicitly shown in FIG. 1. See the specification at, for example, page 7, lines 21-23. 
Accordingly, the objection is believed to be improper, and should be withdrawn. 

Claims 1, 2, 4-8, 20, 23-25, 30, 32 and 33 stand rejected under 35 U.S.C. §103(a) over 
U.S. Patent No. 6,842,106 (hereinafter "Hughes") in view of U.S. Patent No. 4,928,098 
(hereinafter "Dannhaeuser"). 

Claims 3, 9-16 and 26-29 stand rejected under § 103(a) over Hughes and Dannhaeuser in 
combination with other references. 

Claims 17-19, 21 and 22 are indicated as containing allowable subject matter. 

Applicant initially traverses on the ground that the Office Action fails to provide a proper 
resolution for each of the pending claims. More specifically, there is no particular ground of 
rejection cited for independent claim 31. Accordingly, the Office Action is improper on its face. 
Any subsequent Office Action should be indicated as having a non-final status so as to permit 
Applicant a chance to respond to a proper resolution of claim 3 1 . 

With regard to the §103(a) rejection of claims 1, 2, 4-8, 20, 23-25, 30, 32 and 33 over 
Hughes and Dannhaeuser, Applicant respectfully traverses. 
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A proper prima facie case of obviousness requires that the combination of references 
must teach or suggest all the claim limitations, and that there be some suggestion or motivation, 
either in the references themselves or in the knowledge generally available to one of ordinary 
skill in the art, to combine or modify the reference teachings. See Manual of Patent Examining 
Procedure (MPEP), Eighth Edition, August 2001, §706.020). 

Applicant submits that the Examiner has failed to establish a proper prima facie case of 
obviousness in the § 103(a) rejection of independent claim 1, in that the collective disclosures of 
Hughes and Dannhaeuser fail to teach or suggest all the claim limitations, and in that no cogent 
motivation has been identified for combining or modifying the reference teachings to reach the 
claimed invention. 

Independent claim 1 is directed to a method for use in an RFID system comprising at 
least one RFID device and at least one reader which communicates with the RFID device. The 
method includes the steps of associating a plurality of pseudonyms with the RFID device, and 
transmitting from the RFID device different ones of the pseudonyms in response to different 
reader queries of the RFID device. The claim further specifies that an authorized verifier is able 
to determine that the different transmitted pseudonyms are associated with the same RFID 
device. 

Applicant notes that the term "RFID device" is defined at page 5, lines 8-10, of the 
specification as including "an RFID tag or any other type of device configurable for transmission 
of device-identifying information via radio frequency communications." Also, the term 
"pseudonym" is defined at page 5, lines 20-23, of the specification as including "device- 
identifying information transmitted by an RFID device, such as an identifier in a given set of 
multiple identifiers stored or generated in the device." 

The Examiner argues that the proposed combination of Hughes and Dannhaeuser teaches 
each and every limitation of claim 1. Applicant respectfully disagrees. In formulating the 
rejection, the Examiner argues that the secret key value 66 stored in memory 50 of each tag 44 
constitutes one or more pseudonyms as claimed. See the Office Action at page 3, last paragraph. 
However, the secret key value 66 cannot reasonably be construed as comprising a plurality of 
pseudonyms, or even a single pseudonym. As noted above, a pseudonym as that term is used in 
the present specification and in standard usage implies some ability to identify a particular entity 
with which the pseudonym is associated. In the Hughes system, the same secret kev value 66 is 
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stored in each of the tags 44. as indicated at column 5, lines 47-50. Thus, the secret key value 
itself does not provide any device-identifying information whatsoever, and accordingly is not a 
pseudonym for the device. Instead, Hughes teaches to use a conventional identification code to 
identify a particular tag to the reader . See Hughes at, for example, column 5, lines 7-8 and 21-23. 
The tags in the Hughes system are therefore configured to "broadcast their identifiers in a 
promiscuous manner to any nearby readers." See the specification at page 2, lines 12-15. 
Hughes addresses this problem through the use of a complex challenge-response authentication 
process, of the type referred to at page 2, lines 16-22, of the specification, rather than through the 
use of pseudonyms as claimed. Thus, Hughes is believed to teach away from the claimed 
arrangements. 

Applicant also notes that the secret key value 66 is apparently not transmitted by any of 
the RFID tags in Hughes. Furthermore, the pseudorandom values that are processed using the 
secret key value and transmitted as part of the challenge-response authentication process do not 
constitute pseudonyms as claimed, again because such pseudorandom values do not provide any 
device-identifying information. 

The Examiner acknowledges that Hughes alone fails to meet the limitations of claim 1, 
but argues that the deficiencies of Hughes are overcome by Dannhaeuser. However, the 
automobile remote keyless entry codes in Dannhaeuser do not constitute pseudonyms as claimed, 
because the codes do not provide any ability to uniquely identify a particular code transmitting 
device. In the remote keyless entry context of the Dannhaeuser system, it is well known that for 
a given automobile, the owner is typically provided with multiple redundant remote keyless entry 
devices. The codes shown in the table in column 3 of Dannhaeuser would therefore have to be 
replicated on each such device. As a result, the codes themselves cannot be used to uniquely 
identify any particular one of the multiple devices. The Dannhaeuser codes are therefore not 
pseudonyms as recited in the claim. Moreover, because the Dannhaeuser devices do not transmit 
device-identifying information, those devices are not RFID devices as claimed. 

The collective teachings of Hughes and Dannhaeuser therefore fail to meet the 
pseudonym transmission aspects of claim 1. 

Inasmuch as claim 1 includes limitations not taught or suggested by the teachings of 
Hughes and Dannhaeuser, the Examiner has failed to establish a prima facie case of obviousness 
for this claim. 
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Also, as indicated previously, the Examiner has failed to identify a cogent motivation for 
combining the Hughes and Dannhaeuser references or for modifying their teachings to reach the 
claimed invention. The claimed arrangement advantageously overcomes problems associated 
with the conventional approach of configuring RFID tags to "broadcast their identifiers in a 
promiscuous manner to any nearby readers." Hughes, by teaching use of such an identifier 
broadcasting approach in conjunction with challenge-response authentication, directly teaches 
away from the claimed invention, and fails to provide its associated advantages. Similarly, 
Dannhaeuser teaches to transmit remote keyless entry codes, which may be replicated on 
multiple devices and hence do not uniquely identify any particular device. Accordingly, there is 
no objective evidence of record which would lead one skilled in the art to combine or modify 
Hughes and Dannhaeuser to reach the claimed invention. 

The Federal Circuit has stated that when patentability turns on the question of 
obviousness, the obviousness determination "must be based on objective evidence of record" and 
that "this precedent has been reinforced in myriad decisions, and cannot be dispensed with." In 
re Sang-Su Lee , 277 F.3d 1338, 1343 (Fed. Cir. 2002). Moreover, the Federal Circuit has stated 
that "conclusory statements" by an examiner fail to adequately address the factual question of 
motivation, which is material to patentability and cannot be resolved "on subjective belief and 
unknown authority." Id. at 1343-1344. As noted above, there has been no showing in the present 
§ 103(a) rejection of claim 1 of objective evidence of record that would motivate one skilled in 
the art to combine or modify the Hughes and Dannhaeuser references to produce the particular 
limitations in question. 

The Examiner apparently argues that it would be obvious to apply the remote keyless 
entry code rotation process of Dannhaeuser to the secret key value 66 of Hughes to provide 
improved security. See the Office Action at page 4, last three lines, to page 5, lines 1-2. 
However, such an arrangement would clearly be undesirable in an RFID system having a very 
large number of tags. Hughes teaches that the same secret key value 66 is stored in each of the 
tags. In a typical RFID system, there are thousands of such tags. If the Dannhaeuser code 
rotation were applied to the secret key value 66 of Hughes, it would appear to be very difficult 
and highly impractical to coordinate such secret key value rotation between all the tags and the 
reader. The rotation is possible in the Dannhaeuser automobile remote keyless entry context 
because there are usually only a few remote keyless entry devices per automobile. Moreover, 
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Hughes provides a challenge-response authentication process to address the security issue raised 
by the Examiner, and thus there is no apparent need in the Hughes system for code rotation of 
the type disclosed in Dannhaeuser. 

It therefore appears that the Examiner in formulating the § 103(a) rejection of claim 1 
over Hughes and Dannhaeuser has undertaken a piecemeal reconstruction of the claimed 
invention based upon impermissible hindsight, given the benefit of the disclosure provided by 
Applicant. 

Thus, the § 103(a) rejection of claim 1 over Hughes and Dannhaeuser is believed to be 
improper, and should be v^ithdrawn. 

Dependent claims 2, 4-8, 20 and 23-25 are believed allowable for at least the reasons 
identified above with regard to independent claim 1 . 

Independent claims 30, 31 and 32 include limitations similar to those of independent 
claim 1, and are therefore believed allowable for reasons similar to those identified above. 

Applicant further notes with regard to claim 33 that the Examiner is incorrect in stating at 
page 6, last paragraph, of the Office Action that claim 33 "recites the limitations of claim 1." 
Claim 33 does not include the wherein clause of claim 1, and does not refer to an RFID system 
or RFID devices. See the specification at, for example, page 5, lines 2-7. Claim 33 recites that 
pseudonyms are determined utilizing an updatable set of one or more one-time pads maintained 
in a device. The Examiner argues that the claimed updatable set of one or more one-time pads is 
disclosed by the "index designators" in column 4, lines 5-24, of Dannhaeuser. Applicant 
respectfully disagrees. As is well known to one skilled in the cryptographic arts, a "one-time 
pad" is a type of cryptographic construct, an example of which is described in the specification at 
page 10, lines 11-17. The relied-upon portion of Dannhaeuser makes no reference whatsoever to 
any aspect of cryptography, much less to one-time pads as claimed. 

Dependent claims 3, 9-16 and 26-29 are believed allowable for at least the reasons 
identified above with regard to independent claim 1. The additional cited references fail to 
overcome the fundamental deficiencies of Hughes and Dannhaeuser as identified above. 
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Accordingly, claims 1-33 are believed to be in condition for allowance. 



Respectfully submitted, 
^ Tosenh R. Rvan 



Date: May 9, 2005 ^^-^ Joseph B.Ryan 

Attorney for Applicant(s) 
Reg. No. 37,922 
Ryan, Mason & Lewis, LLP 
90 Forest Avenue 
Locust Valley, NY 11560 
(516) 759-7517 



Enclosure(s): Copy of Form PTO-1449 from Supplemental IDS 
Copy of Return Postcard 
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